Head,Internal Audit and Compliance

• Jul 2020 - Present

Compliance Officer

• Jul 2020 - Present

Internal Auditor

• May 2010 - Jul 2020

• Plan specific audits to determine whether information systems are protected and provide value to the organization. • Conduct audits in accordance with IT audit standards to achieve planned audit objectives. • Report audit findings and make recommendations to key stakeholders. • Carry out follow-ups and prepare status reports to ensure that recommended actions have been taken in a timely manner. • Evaluate the organization’s business continuity plan and carry out business continuity test to determine the organization’s ability to continue essential business operations during a period of disruption. • Evaluate the business case for proposed investment in applications • Evaluate controls for information systems during the requirements, acquisition, development and testing phases for compliance with organization’s policies, standards and procedures. • Conduct post implementation reviews of systems to determine whether project deliverables, controls and organization’s requirements are met. • Carry out Users Acceptance Test and report to management for approval to deploy system. • Evaluate service level management practices to determine whether the level of service from internal and external service providers is determined ad adhered to. • Review incident management practices to determine whether all incidents are recorded, analyzed and resolved within stipulated timeline. • Evaluate change, configuration and release management practices to determine whether scheduled and non-scheduled changes made to the organization’s life environment are adequately controlled and documented. • Evaluate the adequacy of backup and restore processes to determine the availability of data required to resume processing. • Evaluate the monitor physical and logical access to determine whether information assets are adequately safeguarded. • Carry out review of user’s access on the organizations network and applications and communicate exceptions observed to stakeholders for adequate action. Show less

Internal Auditor

• Dec 2007 - Dec 2016